Red Hat Jboss Fuse
66 CVEs tracked. 2 of them are in CISA KEV.
This hub aggregates every CVE we track for Red Hat Jboss Fuse, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Jboss Fuse CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 66 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical10
- High27
- Medium27
- Low2
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Jboss Fuse.
- CVE-2024-21490This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super...7.5
- CVE-2022-4245Codehaus-plexus: xml external entity (xxe) injection4.3
- CVE-2022-4244Codehaus-plexus: directory traversal7.5
- CVE-2023-1108Undertow: infinite loop in sslconduit during close7.5
- CVE-2022-46751Apache Ivy: XML External Entity vulnerability in Apache Ivy8.2
- CVE-2023-20861In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression ...6.5
- CVE-2021-46877jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving Jso...7.5
- CVE-2022-41862In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client ...3.7
- CVE-2022-45047Apache MINA SSHD: Java unsafe deserialization vulnerability9.8
- CVE-2022-37866Apache Ivy allows path traversal in the presence of a malicious repository7.5
- CVE-2022-40152Stack Buffer Overflow in Woodstox6.5
- CVE-2021-3644A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management inte...3.3
- CVE-2022-22971In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticate...6.5
- CVE-2022-29885EncryptInterceptor does not provide complete protection on insecure networks7.5
- CVE-2022-24823Local Information Disclosure Vulnerability in io.netty:netty-codec-http5.5
Product grouping is registry-driven, with AI assist and human review. How it works